Storage server - shares + permissions.

MrGuvernment

Fully [H]
2FA
Joined
Aug 3, 2004
Messages
24,354
Hello all my networking geniuses!

i have some questions.

At work i have set up a raid 1 system for the location of some employee's documents folders, as they claim things go missing randomly.

I have windows server 2003 standard on this system. with a 9g SCSI drive as the main drive qand 2 x 80g SATA drivers as the raid 1. (more drives will be added later)

i am going to be having 3 departments using this system for their documents.

A
B
C

I am working with group A right now.

I have a folder on the raid drive labled A , with in that folder are various sub folders

A

  • 1
    2
    3
    4
    5

I have shared drive A so it can be seen over the network \\storage\A , but only accessed by group A (i added a user / pass into the windows system with the same as the computer access this storage system) I dont want group B getting into group A's folder.

Now, the issue i am having, i dont want people to save files, create folders in the A main root, i want people to only be able to create files / folders with in the sub folders (1-5)

I have messed with the security options, and the sharing options, but for the life of me i can not get it to work - you either can, or can not create files / folder in all dir, the root of A and all sub (1-5) folders.

Could someone perhaps guide me in the right direction on how i can go about doing this?

Sorry if i made it sound confusing as i am sure i did.
 
Disable write access by that user to the main folder and do NOT inherit permissions?
 
MrGuvernment said:
I have shared drive A so it can be seen over the network \\storage\A , but only accessed by group A (i added a user / pass into the windows system with the same as the computer access this storage system) I dont want group B getting into group A's folder..


This part here sounds like you're running it in workgroup mode, that either the 2K3 server is not running as a DC with AD, and/or the workstations are setup with local logins/peer to peer workgroup mode.

But yes...just uncheck inherit permissions.
 
ohhhhh i think that worked :) so far so good :)

life saviour u are - so far.

shall keep yeah posted.

always miss the simple things.
 
YeOldeStonecat said:
This part here sounds like you're running it in workgroup mode, that either the 2K3 server is not running as a DC with AD, and/or the workstations are setup with local logins/peer to peer workgroup mode.

But yes...just uncheck inherit permissions.

That is correct, for the amount of people involved i did not think a DC or AD was neccesary, however if this system grows, which i am thinking it will, i do plan to put in an AD and DC since our support team is growing nicely, limited to 2 PC's right now, but could be more soon.
 
Question - can you integrate ISA server with an AD/ DC ? such that if X user logs in to a terminal, they wont be limited to what web access they have, but if user Y logs in, it will limit them ?
 
Back
Top